json-pointer

Some utilities for JSON pointers described by RFC 6901

Latest 0.6.2

NPM

58%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Are you affected? Scan for Free

Health Score Breakdown

Project backing

The repository is owned by an individual account rather than an organization, so the thin ownership context offers limited evidence of institutional maintenance capacity.

Release history

The package has 13 releases, but its latest release was in February 2022 and there were no releases in the last 12 months, indicating substantial maintenance slowdown.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, a meaningful maintenance concern when combined with the old latest release.

Repo issue activity

Five issues and eight pull requests remain open, while no issues or pull requests were created or merged in the last month, adding evidence of limited current maintenance.

Repo tooling

The repository uses Make for builds, but no security scanning tools were detected; this is a modest transparency and hygiene gap rather than a severe dependency risk.

Vulnerabilities

Title	Versions	Severity
CVE-2022-4742 json-pointer is vulnerable to Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') in versions 0.0.0 - 0.6.2.	0.0.0 - 0.6.2	Critical
CVE-2021-23820 json-pointer is vulnerable to Access of Resource Using Incompatible Type ('Type Confusion') in versions 0.0.0 - 0.6.1.	0.0.0 - 0.6.1	Medium
CVE-2020-7709 json-pointer is vulnerable to Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') in versions 0.0.0 - 0.6.1.	0.0.0 - 0.6.1	Medium